Certificate

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898.cer
File:                     1b8f9be3-65c4-421d-a760-278a00443898.cer (raw, json)
Hash identifier:          iIP9wtPbqTittWUSF1OjjkcliDdedGgAmLrsEm+4VQU=
Subject key identifier:   7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B
Authority key identifier: 80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE
Certificate issuer:       /CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
Certificate serial:       010D0C9F43285847D3FD23FAB5EAB9E87D63A800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
Manifest:                 rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft
caRepository:             rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/
Notify URL:               https://rrdp.arin.net/notification.xml
Certificate not before:   Sun 10 Nov 2024 01:45:33 +0000
Certificate not after:    Sat 13 Feb 2027 01:45:33 +0000
Subordinate resources:    AS: 63020
                          IP: 141.193.144.0/22
                          IP: 2602:ff14::/36

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:d3:fd:23:fa:b5:ea:b9:e8:7d:63:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76fe11d4-d352-4994-8f6c-d6c91b0b8415
        Validity
            Not Before: Nov 10 01:45:33 2024 GMT
            Not After : Feb 13 01:45:33 2027 GMT
        Subject: CN=1b8f9be3-65c4-421d-a760-278a00443898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6f:47:0a:d1:8c:53:ba:7c:7a:a8:6b:4a:7f:
                    cc:f4:8d:e8:d1:8b:b8:a2:87:4a:b0:07:20:0c:9e:
                    d4:8f:6d:48:74:4c:b5:36:d1:80:e2:26:40:7e:49:
                    e5:50:db:0b:f4:87:94:28:f0:00:90:e0:aa:7f:af:
                    ef:92:9d:80:14:e9:d0:a1:e2:0a:29:b4:c3:db:b9:
                    d7:ae:da:9b:b9:cf:47:76:21:fb:fc:a3:e8:eb:68:
                    d5:08:db:dc:e5:18:bf:3e:43:46:68:41:a2:3b:c5:
                    72:cb:2c:19:30:df:c2:1b:f4:86:ce:94:c8:f8:b5:
                    77:c5:48:11:d8:96:7d:09:f9:1f:b4:3a:a9:53:61:
                    2b:18:38:38:a7:ef:4e:d7:58:1c:4c:82:16:17:76:
                    62:f9:53:bf:8c:09:01:3e:2e:1a:11:b6:33:c7:04:
                    60:fa:93:45:0a:4e:f2:e0:75:90:e9:0f:fc:40:57:
                    cb:5e:69:8a:bd:c0:7a:6b:e8:7c:70:51:22:80:cb:
                    e8:78:80:ef:d0:3e:f3:e0:bd:22:95:c3:9e:e4:a0:
                    76:f5:51:0a:85:cd:1c:09:85:24:7c:54:7a:f9:30:
                    a1:30:dd:47:59:1e:a0:c2:c7:d7:cb:78:79:23:0b:
                    74:e6:a9:4b:ca:0e:6f:6b:04:87:40:c4:50:da:48:
                    cd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:FF:06:6B:4A:BB:CB:E3:37:A4:49:80:74:3E:B3:F7:0B:D6:C5:1B
            Subject Information Access:
                CA Repository - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/
                RPKI Manifest - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1b8f9be3-65c4-421d-a760-278a00443898/1b8f9be3-65c4-421d-a760-278a00443898.mft
                RPKI Notify - URI:https://rrdp.arin.net/notification.xml

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl

            X509v3 Authority Key Identifier:
                keyid:80:B7:A4:B6:65:DE:54:9A:A7:84:43:A8:68:1A:D2:86:45:79:57:CE

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.144.0/22
                IPv6:
                  2602:ff14::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  63020

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:d7:2e:9d:57:2e:6a:e0:ee:86:57:cf:c8:8e:43:37:68:
         bc:b4:78:dc:93:e0:21:63:cb:43:f5:cf:82:c8:06:9c:9f:5c:
         3c:06:7c:3c:bf:0d:1d:a0:15:1d:5e:33:23:09:a9:a3:23:3f:
         4e:c0:da:15:d6:53:5e:16:38:a7:f8:10:bf:00:09:9d:98:d5:
         85:a8:66:4f:b2:54:67:a9:93:f9:20:b9:a5:0b:de:76:c6:33:
         28:a5:99:e9:84:ae:6d:7e:38:c5:40:3b:da:3d:77:0d:29:07:
         6c:9e:4b:13:b3:8b:1c:3d:1b:51:9e:39:da:2a:1f:28:b2:bf:
         ab:96:e9:eb:c6:41:11:a4:99:87:8f:4e:bf:d8:c5:68:85:7c:
         f6:6c:f9:31:d8:56:6d:e2:33:99:2d:47:d6:65:1e:e6:a4:c2:
         b3:ef:b6:42:82:f3:cc:91:21:46:de:9c:9a:48:d1:46:6e:f2:
         70:1f:03:82:96:3a:82:b3:14:4b:1d:94:45:49:3f:9c:3d:0a:
         63:46:a5:a5:74:ff:f7:89:05:9b:4b:1b:e7:e5:a8:b9:6d:a2:
         dc:79:3e:0b:7f:3c:ce:d7:24:ba:c6:dc:ce:d7:fc:2a:77:68:
         78:64:ca:f4:4f:7f:27:c4:da:bd:54:41:6d:03:01:33:90:3a:
         2c:ec:ee:b1
-----BEGIN CERTIFICATE-----
MIIHGTCCBgGgAwIBAgIUAQ0Mn0MoWEfT/SP6teq56H1jqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzZmZTExZDQtZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4
NDE1MB4XDTI0MTExMDAxNDUzM1oXDTI3MDIxMzAxNDUzM1owLzEtMCsGA1UEAxMk
MWI4ZjliZTMtNjVjNC00MjFkLWE3NjAtMjc4YTAwNDQzODk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG9HCtGMU7p8eqhrSn/M9I3o0Yu4oodKsAcg
DJ7Uj21IdEy1NtGA4iZAfknlUNsL9IeUKPAAkOCqf6/vkp2AFOnQoeIKKbTD27nX
rtqbuc9HdiH7/KPo62jVCNvc5Ri/PkNGaEGiO8VyyywZMN/CG/SGzpTI+LV3xUgR
2JZ9CfkftDqpU2ErGDg4p+9O11gcTIIWF3Zi+VO/jAkBPi4aEbYzxwRg+pNFCk7y
4HWQ6Q/8QFfLXmmKvcB6a+h8cFEigMvoeIDv0D7z4L0ilcOe5KB29VEKhc0cCYUk
fFR6+TChMN1HWR6gwsfXy3h5Iwt05qlLyg5vawSHQMRQ2kjNQQIDAQABo4IEKzCC
BCcwHQYDVR0OBBYEFHv/BmtKu8vjN6RJgHQ+s/cL1sUbMIIByAYIKwYBBQUHAQsE
ggG6MIIBtjCBqgYIKwYBBQUHMAWGgZ1yc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVw
b3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3
MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8x
YjhmOWJlMy02NWM0LTQyMWQtYTc2MC0yNzhhMDA0NDM4OTgvMIHSBggrBgEFBQcw
CoaBxXJzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10
YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMvNzZmZTExZDQt
ZDM1Mi00OTk0LThmNmMtZDZjOTFiMGI4NDE1LzFiOGY5YmUzLTY1YzQtNDIxZC1h
NzYwLTI3OGEwMDQ0Mzg5OC8xYjhmOWJlMy02NWM0LTQyMWQtYTc2MC0yNzhhMDA0
NDM4OTgubWZ0MDIGCCsGAQUFBzANhiZodHRwczovL3JyZHAuYXJpbi5uZXQvbm90
aWZpY2F0aW9uLnhtbDAPBgNVHRMBAf8EBTADAQH/MIG3BgNVHR8Ega8wgawwgamg
gaaggaOGgaByc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJw
a2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUx
MWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83NmZlMTFkNC1kMzUyLTQ5
OTQtOGY2Yy1kNmM5MWIwYjg0MTUuY3JsMB8GA1UdIwQYMBaAFIC3pLZl3lSap4RD
qGga0oZFeVfOMA4GA1UdDwEB/wQEAwIBBjCBmgYIKwYBBQUHAQEEgY0wgYowgYcG
CCsGAQUFBzAChntyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmlu
LXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2
ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS5jZXIwLwYIKwYBBQUH
AQcBAf8EIDAeMAwEAgABMAYDBAKNwZAwDgQCAAIwCAMGBCYC/xQAMBoGCCsGAQUF
BwEIAQH/BAswCaAHMAUCAwD2LDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDow
OAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtp
L2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA+QNcunVcuauDuhlfPyI5DN2i8
tHjck+AhY8tD9c+CyAacn1w8Bnw8vw0doBUdXjMjCamjIz9OwNoV1lNeFjin+BC/
AAmdmNWFqGZPslRnqZP5ILmlC952xjMopZnphK5tfjjFQDvaPXcNKQdsnksTs4sc
PRtRnjnaKh8osr+rlunrxkERpJmHj06/2MVohXz2bPkx2FZt4jOZLUfWZR7mpMKz
77ZCgvPMkSFG3pyaSNFGbvJwHwOCljqCsxRLHZRFST+cPQpjRqWldP/3iQWbSxvn
5ai5baLceT4LfzzO1yS6xtzO1/wqd2h4ZMr0T38nxNq9VEFtAwEzkDos7O6x
-----END CERTIFICATE-----